Password Generator
Create strong, random passwords or memorable passphrases with full control over length, character sets, and readability. Includes a live strength meter, batch generation, and one-click copy — all running locally in your browser.
Passwords are generated locally in your browser using crypto.getRandomValues. Nothing is uploaded or logged.
Generate secure passwords or passphrases in your browser. Choose length, symbols, numbers, uppercase/lowercase, exclude look-alike or ambiguous characters, and generate multiple at once — with a real-time strength meter.
About the Password Generator
Weak, reused passwords are still the number-one cause of account takeovers. This generator gives you the two things a good password needs: enough randomness to resist guessing, and enough control to meet whatever the site is asking for. Every password is produced by crypto.getRandomValues, the same secure random source used by modern browsers for TLS. Nothing you generate is transmitted or stored — the tool is a single HTML page running in your tab.
Common use cases
- Creating strong, unique passwords for every online account. - Generating master passwords for your password manager. - Producing WiFi passwords that are readable and easy to share on printed cards. - Seeding database, SSH, and API account passwords in bulk. - Rotating credentials on a schedule for compliance requirements. - Generating memorable passphrases for encrypted backups and disk volumes.
Tips for great results
- Length beats complexity — a 20-character password with only letters is stronger than an 8-character one with symbols. - Never reuse a password across sites. Use a password manager to keep track. - For master passwords you have to remember, prefer a 5-6 word passphrase over a short random string. - Turn on "Exclude similar" for anything a human will type from a screen or a card. - Turn on "Exclude ambiguous" for passwords that will live in shell scripts, URLs, or config files. - Regenerate a few times and pick the one that feels right — every result is equally random.
Limitations
- The strength meter is an estimate. Real-world strength also depends on whether the password is unique and how the site stores it. - Passphrase words come from a curated wordlist; extremely long passphrases will start reusing words. - Some legacy systems reject certain symbols — enable "Exclude ambiguous" if you run into that. - This tool does not store your passwords. If you close the tab, they are gone — copy them into a password manager first.
Key features
Uses the browser's crypto.getRandomValues API — the same primitive banks and password managers rely on.
Slide from 6 to 64 characters to match any site's rules — the longer the password, the stronger the result.
Toggle uppercase, lowercase, numbers, and symbols independently to satisfy strict or relaxed password policies.
Optionally drop confusing characters like i, l, 1, L, o, 0, O so passwords are easier to read and type.
Skip characters that some systems escape or reject — brackets, quotes, backslashes, and more.
Generate multi-word passphrases (like correct-horse-battery-staple) that are easy to remember and hard to crack.
A four-step meter estimates entropy in real time so you can see how each option changes password strength.
Create up to 50 unique passwords at once — perfect when seeding accounts, servers, or IoT devices.
Copy the primary password or the entire batch to your clipboard without ever showing it in a URL or history.
No network requests, no analytics on your password. Everything happens in your browser tab.